PROGRAMMABLE CONTROLLER 



BACKGROUND OF THE INVENTION 
Field of the Invention 

5 The present invention relates to programmable controllers. 



SUMMARY OF THE PRIOR ART 

Programmable controllers were first developed in the 1960s when they were developed 
as replacements for control systems built with electrical relays. 
1 0 Today, programmable controllers are highly capable, general-purpose industrial control 

systems, programmable in the sense that the end user can configure the required control 
functionality within the controller. They exist in many forms ranging from very simple low cost 
systems to very complex powerful systems* 



15 ABBREVIATIONS AND SYMBOLS 

The following abbreviations will be used in the text - 
DFB -Diagnostic Function Block 
I/O - Input / Output [system] 
ISO - International Standards Organisation 
20 LPC - Logic Processing Circuit 
MC - Monitoring Computer 
NSC - Non Storage Circuit 
PLD - Programmable Logic Device 
SC - Storage Circuit 

25 Various standardised symbols are also used throughout file drawings. Examples of these 

are found as follows - 

An input connector 10 in Figure 5. 

An output connector 16 in Figure 5. 

An interface circuit 1 1 or 15 in Figure 5, 
30 An AND gate 7a in Figure 2b. 

An OR gate 7b in Figure 2b. 

An XOR gate 104 in Figure 12. 

An inverter 7c in Figure 2b* 



A D flip-flop 9a in Figure 4. 

A multiplexer 94 in Figure 1 1, 

A programmable interconnection 33 in Figure 6. 

A switch 7d in Figure 2a, 

A ladder diagram output coil 7e Figure 2a* 

A single signal connection If in Figure 2b, This symbol, when associated with block symbols, 

may also indicate generalised interconnections. 

A contacting connection point 7g in Figure 2b. 

A non-contacting connection crossover 30a in Figure 6. 

A signal path 93, operative temporarily as and when required, is shown in Figure 11. This symbol 

is also used to indicate a transfer of control as and when required in Figure 3 . 

A multi-signal bus connection 54 in Figure 8* Circuit elements, such as switches, shown in a bus 

connection imply separate circuit elements as required for each bus signal. 

A generalised channel for data transfer and control 49 in Figure 8. 

A dashed line 19a, not being part of a box or circle, in Figure 6, implies the presence of 
additional detail of the land found at the ends of the line in the space occupied by the line. 

Current architecture 

Current programmable controllers are designed as shown in Figure 1 . They consist of a 
processor 1 communicating with memory 2 and Input/Output (I/O) devices 3 & 4 respectively. 
The memory is arranged to hold a program 5 and data 6, which when processed, enables the 
Programmable Controller to ftnction in the way required by the end-user for the purpose of 
controlling a process plant and/or machinery via the I/O. 

TheftogrammableControIler operates byrea<Knginput values, pw>cessing those values together 
with internally stored values generated during programming or earlier processing, and thereby 
arriving at values to be further stored or written to output devices in order to control the process 
plant and/or machinery. 

In essence, current programmable controllers are special purpose computers, often with 
highly modular and configurable special I/O systems designed to interface with the process being 
controlled. It should be noted that the processor shown may in fact be more Hum one processor, 
each assigned their own tasks. One processor may handle the I/O, and another the processing of 
the user control program. 
User programming methods 



Because programmable controllers were designed originally to replace relay systems and 
to be used by personnel who were familiar with relay ladder diagrams (wiring diagrams), the 
traditional method for entering and displaying the ItogrammableController user control program 
was as a ladder diagram. A ladder diagram is illustrated in Figure 2d and an example of an 
individual rung in &e ladder is illustrated in Figure 2a, A ladder diagram ean be entered into the 
Programmable Controller and viewed using a specially configured computer screen and 
keyboard, or printed as hard copy. The program could also be processed by the computer in any 
of the ways common to normal data processing, including being stored on disk, translated and 
presented in some other applicable form* analysed for information contained, and of course run 
as a program under the control of an operating system. 

As time progressed it became apparent that there were alternative ways of expressing the 
Programmable Controller user control program. These included methods using logic diagrams, 
function blocks, state diagrams, sequential function charts, as well as pure text file fozm. Many 
of the methods proving most popular have been formalised as part of the ISO standard EC 1131, 
which can be used as a good example to help understand the methods being discussed. 
. Essential characteristics 

All of these systems rely on the Programmable Controller having a processor, which 
processes a software user control program using input data and stored data to determine what 
should be stored for later use and/or written to the outputs. 

The essential characteristics of a processor are the processing of a program, as evidenced 
by the program instructions stored in memory and the existence of the Fetch and Execute cycles 
of the processor* These cycles fetch instructions from memory and execute the necessary 
operations defined by the instructions. 

The program may be of a kind that is directly executed, or that relies on an interpreter. 

Existing programmable controllers are relatively slow because all processing tasks are 
channelled through one or at most a few processors. 
Functionality 

The control functionality normally provided by a Programmable Controller consists 
broadly of - 

1 . Logic Control, which evaluates logic conditions and enables actions to occur, such as 
turning an alarm on if a pressure is too high. 

2. Sequence Control, such as carrying out a predefined sequence of operations to process 
a part through a drilling machine. 



3. Punctiou Block ccmtrol, such as costing then^ 
machine. 

A Programmable Controller will also provide system monitoring. These subjects are 
discussed below. 
Logic control 

A simple example of control logic as used with programmable controllers is illustrated 
in Figures 2a, 2b, and 2c. Figure 2a represents a single rung of a ladder diagram. A typical ladder 
program as shown in Figure 2d consists of many rungs, normally each with different logic. 

Logic maybe expressed in three alternative and equivalent ways - ladder diagram, logic 
diagram as shown in Figure 2b, and logic equation form, Figure 2c. It should be noted that 
wherever one form is used, it is also logically equivalent to use either of the other two forms. 

Note that in the discussion of logic functions, the word 'false' may also be taken to mean 
'off, '0', 'low* or 'deactivated', and the word 'true* may be taken to mean W s * 1 \ 'high* or 
'activated* dependent on the context 

Starting with initial conditions where SI, S2 and Outputl are all false, the operation of 
the example logic can be described as follows - 
L If S2 now goes true, Outputl becomes true, 

2. If S2 now goes false, Outputl stays true. 

3. if SI now goes true* Outputl becomes false, 

4. If SI now goes false, Outputl stays false. 
Note that if SI is true, it overrides the effect of S2. 
Sequence control 

Programmable controllers provide sequence control programming entered and displayed 
by a variety of means such as sequential function charts and state diagrams. 

A sequence control scheme allows a user to define a control step consisting of actions to 
be carried out until the occurrence of some terminating condition, and then to direct control to 
some next control step, The whole scheme describes an interconnected network of steps defining 
the necessary sequence of operations. 

A simple example of sequence control for a drilling machine is shown in descriptive form 
in Figure 3. 
Function blocks 

Function blocks are used in Programmable Controller programs to provide functionality 
that can be displayed and manipulated at a higher level than simple logic. Function blocks, or 



their equivalent, are found in many forms of Programmable Controller programming, and 
encapsulate the associated logic to hide unnecessary complexity from the user. 

Figtire 4 illustrates a function block 8 with its associated inputs and outputs, 8a and 8b 
respectively, and shows a simple example of logic 9 that maybe hidden within such a function 
5 block. 

In a Programmable Controller based around a program executed by a processor, a 
function block broadly represents a pre-programmed software object. 

A simple example might be a timer function block requiring the user to provide no more 
than a customised time delay value and specify a run/stop signal A counter would be another 
10 simple example. 

A more complex function block might provide servo motor positioning functionality and 
require the user to provide extensive setup data followed by a series of new values representing 
the successive positions the motor is required to assume. 
System monitoring 

15 A processor based Programmable Controller uses its processing capability to provide 

necessary system monitoring functions. 

System monitoring is the process of loading a user control program into a controller and, 
by observing system activity and making necessary adjustments, bringing the system to a 
satisfactory state of operation. The system monitoring functions allow the user to display and 

20 modify both the user control program and data, to control the running of the program and also 
monitor the proper operation of the program and the system* Means of ensuring that the 
controller recovers from or is turned off if processing or other mors occur, are normally also 
provided. 

The performance of the detailed tasks required to provide these services are 
25 normally split between the Programmable Controller and a computer arranged for monitoring the 
Programmable Controller but separate to it The monitoring computer (MC) is normally only 
attached during development of the control system and user control program, but not during 
normal use and operation of the Programmable Controller. 

30 SUMMARY OF THE INVENTION 

It is an object of the present invention to provide a programmable controller which will 
at least go some way towards improving on the prior art and or which will at least provide the 
industry with a useful choice* 
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Accordingly the present invention consists in ^programmable controller including: 

at least one user input interface and an input register for connection to process plant 
and/or machinery to provide sampled and stored input data in digital form, 

at least one user output interface and an output register for connection to process plant 
and/or machinery to receive and store output data in digital form, 

programmable logic hardware including a plurality of basic logic dements and 
electrically configurableinterconnections, said interconnections configurable to interconnect the 
logic elements as a user control program circuit and to connect the user control program circuit 
to said input and output interfaces* 

program loading means to enable the user to configure the programmable logic hardware 
as a circuit implementing a user control program prior to initiating control of the associated 
process plant and/or machinery* 

To those skilled in the art to which the invention relates, many changes in construction 
and widely differing embodiments and applications of the invention will suggest themselves 
without departing from the scope of the invention as defined in the appended claims. The 
disclosures and the descriptions herein are purely illustrative and are not intended to be in any 
sense limiting. 

BRIEF DESCRIPTION OF THE DRAWINGS 

One preferred form of the present invention will now be described with reference to the 
accompanying drawings in which: 

Figure 1 is ablock diagram of a conventional programmable controller with a processor 
and software program. 

Figure 2a shows an example of the logic in one rung of a ladder diagram. 

Figure 2b shows the logic of Figure 2a but in lope diagram form. 

Figure 2c shows the logic of Figure 2a but in logic equation fomu 

Figure 2d shows a ladder diagram with rungs marked 1 to Z. 

Figure 3 is a diagram illustrating a simple sequence. 

Figure 4 illustrates the concept of a function block with a detailed circuit hidden within 

it 

Figure 5 shows a block diagram of the invention with a monitoring computer attached. 
Figure 6 to Figure 13 show detail of the invention. Specifically - 
Figure 6 shows an example of VO circuits and a logic processing circuit 



Figure 7 is a tuning diagram for the system. 

Figure 8 shows a configuration with two logic processing circuits as maybe used when 
editing a running program. 

Figure 9 shows an arrangement that allows the exchange of state data between a logic 
processing circuit and a circuit external to it 

Figure 10 shows support circuits used with the arrangement of Figure 9. 

Figure 11 shows an arrangement allowing the necessary management of state data in the 
system. 

Figure 12 shows an arrangement allowing operational Mures to be detected 
Figure 13 shows an arrangement allowing operational failures to be corrected and 
operation continued. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

The programmable controller architecture of the present invention operates without the 
need for a processor or a user control program in the form of software instructions. Instead, the 
user control program is present as an actual circuit functionally equivalent to the user control 
program entered into the MC. 

The circuit representing the user control program is implemented using logic elements, 
such as gates and flip-flops, and electrically programmable interconnection means* Both the logic 
elements and the programmable interconnection means are provided in hardware form. 

The term 'hardware form* means that the gates and flip-flops provided are actual circuits 
and the interconnections conduct actual electric current along their length. That is in contrast to 
the logic elements and interconnections of existing programmable controllers, which do not exist 
as such in a physical form, A display of the existing Programmable Controller logic elements and 
interconnections on an MC screen is just a representation of processor data in a convenient form 
to simplify comprehension. 

Electrically programmable interconnections are conductors, permanently positioned and 
provided with permanently positioned electrically activated switches that are designed and 
positioned to connect the conductor with adjacent conductors or logic elements. The logic 
elements are permanently positioned in a pattern with the programmable interconnections 
distributed around them in such a way that a desired logic circuit can be configured from the 
logic elements and interconnections by appropriate activation and de-activation of (he switches. 

In the invention, the programmable interconnections are used to interconnect the logic 



elements as required to implement the logic circuit representing the required user control 
program. We will refer to the circuit as a Logic Processing Circuit (LPC). The user control 
program is provided to IheProgranmableControUerintheformof abit patten used to configure 
the switches* Specific bits in the bit pattern correspond to specific switches and determine 
5 whether the switches shall be configured on or off. 

A simplified block diagram of the new Programmable Controller architecture is shown 
in Figure 5. Input values are read via input terminals 10 and interface circuits 1 1, of which only 
one set of many is shown. These values are sampled and stored in the input registers 12, and 
processed by the LPC 13* The LPC output values IS are sampled and stored by the output 
10 registers 14 and transferred to the system output terminals 16 via the interface circuits 15, Only 
one of many output terminal and interface circuit pairs is shown, The Monitoring Services and 
Control Unit 1 7 provides services required by the LPC and MC, and control and clock signals 
for the Programmable Controller system. 

Figure 6 shows the LPC 25 in a more detailed but still conceptual manner. The LPC is shown 
15 containing an example interconnected user control program circuit with logic elements such as 
the flip-flop 34 interconnected with programmable interconnections such as 36, Uncommitted 
logic elements 32 and uncommitted interconnections 33 are also shown. In practice, live circuits 
would contain similar logic elements, but be of greater complexity* 

It is one function of the user input interface, and of the user output interface, to provide 
20 electrical protection to the programmable logic hardware. The programmable logic hardware is 
normally implemented with electronic componentry which is not designed to withstand the 
electrical disturbances and voltage levels associated with signals originating within process plant 
and/or machinery. The interfaces ensure only the correct operating levels are applied to the 
programmable logic hardware. 

25 

Cycle tuning for logic processing 

It is desirable to operate the Programmable Controller system logic in a clocked and 
sequenced manner. 

The preferred method of clocked operation eliminates sensitivity to clock skew, 
30 propagation delay variations, and requirements for setup and hold times. 

The preferred system continuously cycles through a number of well-defined steps that 
together may be called an LPC scan. In its preferred form, one cycle of the LPC scan consists of 
the steps of - 
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1 , sampling all input data, including previous output values that are to be fed bade, and 
storing the values, 

2. using the stored values as input data for the logic processing circuit, and allowing the 
circuit to process, and the output data from the circuit settle to a stable value, 

5 3. performing tasks on the LPC required for programmable controller monitoring and 
control, including data transfer and modification, 

4. transferring the output data from the logic circuit and storing the values on the system 
outputs. Allowing the system outputs to settle before repeating 

The steps 1 to 4 above can be thought of as a single logic processing cycle, 
10 It may be advantageous to arrange for the time taken for each LP C scan to be maintained 

□ at a constant value, or alternatively for each LPC scan to be completed in the minimum time 

JJ required for the operations involved. 

IS Sqjaratenon-coinddent clock pukes ^ 

% and store operations* These two clock pulses can be combined as one if the clock skew across 

If! 15 the wholeLPC is small enough to ensure flmt setup and hold time rcqukem^ts are always met, 

^ and if no clocked operations are required between them. Figure 7 shows the four basic steps 

y, of the IPC scan. Figure 7 also shows the pulse 23 that samples system input data and the pulse 

2 31 that samples IPC output data. 

5 The doiibleheaded arrows inFigure 7 indicate 

H -20 lines at the arrowheads. 

The input registers are used to synchronise asynchronous input signals. Setup and hold 
time violations are implicit in such an operation and will lead to some degree of metastability 
dependent on fee characteristics of the flip-flops performing the synchronisation. The registers 
must be allowed sufficient time to settle before the values are used, as defined by the associated 
25 statistics such that metastability does not represent a significant problem. 

Timeperiod 74 represents one whole IPC scan, and is made up of time periods 23a, 23b, 
37, and 31a. 

An input clock 23, is provided in time period 23a during which input data is sampled and 
the resulting values are allowed to settle. 
30 Next, one ox more clock pulses as convenient are provided in time period 23b for use by 

die user control program circuit in the LPC. The user control program logic is processed and the 
resulting values allowed to settle during time period 23b. 

Next, data transfer pukes are provided in time period 37, and state data transfers and 
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modifications occur as required for system monitoring. The circuits are again allowed to settle. 

Next, during time period 3 1 a, clock pulse 3 1 is used to transfer output data to the system 
outputs, which are again allowed to settle. 

The delays between the various clockpulses are arranged to allow for satisfactory settling 
of the logic prior to the next clock pulse. 

Processing a large user control program through one cycle using the hardware means 
described can be completed in sub-microsecond times. This compares to times in the order of a 
millisecond using software-based techniques. 

Figure 6 provides a mote detailed but still simplified circuit of the system, but omits the 
monitoring services and control section* The isolated vertical dashed lines in the drawing imply 
the presence of additional similar circuits of the kinds indicated at the line ends. The description 
will be made in terms of reference numbers applied to individual signal paths through the logic, 
but it will be readily apparent where there are multiple parallel paths to which the same 
description applies. 

Five input terminal and interface circuit pairs 1 9 are shown and these direct input signals 
to the flip-flops 20 forming the input registers 21 . Clock pulses on the input clock line 22 clock 
the input registers. Figure 7 shows the timing of the input clock pulse at 23, The outputs 24 from 
the input registers are passed to the LPC 25, and are used by the user control program logic in 
the LPC together with internally stored state data to generate LPC outputs 26. The UPC outputs 
are fed via the output registers 27 to the output interface circuits 28 and thence to the system 
output terminals 29. A pulse on the output clock line 30 clocks the output registers at a time 
indicated in Figure 7 at 3 1 . 
Providing the logic processing circuit 

The LPC is provided by use of a Programmable Logic Device (PLD). The PLD is loaded 
with a bit pattern representing the settings for the configuration switches required to configure 
the user control program circuit in the PLD. 

The bit pattern can be conveniently generated using a control program development 
system similar to a PLD development system* The user control program is entered into the 
development system and a bit pattern generated from it. The development system can be used to 
download the bit pattern either directly into the PLD or via an attached configuration system. 

The user control program may be in the form of a diagram consisting of logic elements, 
function blocks, etc. The function blocks may be provided to the user as a library. 

Logic diagram templates, similar in principle to word-processing templates, may be 
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provided. The templates may have pre-placed logic elements and function blocks for items 
commonly required in die user circuits and may be used to include the input and output registers 
12 & 14, and the monitoring services and control unit 17 in the same PLD as the LPC 13, 
Logic equivalence 

5 It should be noted that the logical equivalent of a ladder diagram, logic diagram, logic 

equation, sequence control or function block, or a combination of one or more of these forms of 
user control program can be expressed using a Hardware Description Language such as VHDL 
orVerilog. 

A Hardware Description Language such as VHDL or Verilog, preferably supported by 
10 graphical design entry, is also an efficient means of design input to a computer aided design 
system designed to generate PLD bit patterns defining a circuit of logic elements. Graphical 
design entry normally supports at least gate networks and function blocks directly. 

The point is made to emphasise the underlying logical equivalence of the various design 
input methods and to show that the choice of which method to use is one of practical 
IS convenience, ease of comprehension or personal preference. 
State data and implications 

State data is data stored internally within a circuit from one cycle of operation of the 
circuit to the next where the circuit is such that the outputs from clock pulse to clock pulse 
depend on the values stored as well as the inputs to the circuit. State data maybe as simple as a 
20 bit stored on a flip-flop as at 34, or as complex as an array of records stored in a memory. 

The LPC can be said to consist of two types of circuit, namely circuits that do and do not 
store state data, which we will refer to as Storage Circuits (SCs) as at 34 and Non Storage 
Circuits (NSCs) as contained in the dashed circle 35 respectively. 

Data input to NSCs totally define the NSC state once all signals have propagated and the 
25 circuit has settled. Circuits containing only logic gates are NSCs unless connected with feedback 
to form flip-flops. 

An NSC can therefore be reconfigured between one logic processing cycle and the next 
during time period 37, and the circuit will continue to operate as determined by the current inputs 
and circuit logic alone. 

30 On first powering-up, SCs may initialise state data from internally defined values. From 

then on, the changes that occur in the interna! and output signals of an SC depend from clock 
cycle to clock cycle on both the inputs and the stored state data as at 38. Future operation is 
dependent on history* 
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A simple practical example of such internal state data is the value stored in a timer 
function block that represents the time since the timer was commanded to start timing. Another 
example is the value identifying the active state in a state machine function block. 
SCs may also be reconfigured during time period 37 and will continue to operate predictably 
providing proper steps are taken to ensure that the reconfigured SC is also loaded with the correct 
and necessary state data. 

It should also be noted that a function block may be designed in such a way that not all 
of the state data in it need be loaded as discussed. 

For example, a function block might provide complex calculation facilities, with input 
values including details of the calraladons required beingj^vided as mp The functionblock 
can read the inputs, perform the calculations and post the answer accompanied by a flag to 
indicate that the answer may be read. At this point, any intermediate values used in the 
calculation are irrelevant and maybe discarded,, and the associated state data values do not need 
reinstating during reconfiguration. 

The same intermediate state data values can be ignored, if the LPC reconfiguration occurs 
during the calculation, by preserving and modifying the state data values at the function block 
interface in such a way that the calculation is repeated from the beginning and is based on the 
original input data. This may be handled by having the MC automatically modify a function 
block flag during reconfiguration based on data from the function block library. 
System monitoring 

The invention makes provision for all of the normal programmable controller system 
monitoring Junctions. Specifically, the invention provides for the functionality needed in a 
programmable controller to allow an external MC that can perform the required data processing 
to provide services including - 

• Editing, loading, starting, pausing, resuming and stopping a program. Program editing 
and loading are operative during run-time. 

• Reading, displaying, modifying and forcing data and I/O values 

• Error handling. 

To those skilled in the art, it will be readily apparent from the description in this 
specification how a user control program canbe started, paused, resumed and stopped* Other than 
saying that these functions maybe implemented by suitable logic, sequencing and control of the 
various system clocks, no further comment will be made. The other aspects will now be dealt 
with. 
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Program editing during run-time 

It is advantageous when commissioning machinery or processes to be able to edit and 
modify the operative user control program while continuing to maintain proper control. The 
present invention allows for that eventuality. 
5 Where the required response speed of the Programmable Controller is slow enough, a 

program may be modified during run-time between one logic processing cycle and the next 
during time period 37 as Mows - 

• the state data is unloaded from the LPC, 

♦ the new circuit is configured in the LPC, 

10 * the state data is reloaded into the user control program storage elements corresponding 
to those from which it was read, with adjustments as necessary, 
and fiie modification is then complete, ready for the next logic processing cycle to begin. The 
monitoring services and control unit manages the operation in conjunction with the MC and the 
state data may be temporarily stored in the MC. 
IS Editing terminology 

The process of switching from one user control program to the other will be referred to 
as a 'program swap 1 or 'program swapping*. 

Program swapping involves stopping the program currently running, loading a new 
program, and managing the whole process so as to cause the minimum disruption to the plant 
20 being controlled, the whole process being completed as quickly as possible. Program swapping 
is the process used to edit and make changes to a program while it, to all intents and purposes, 
continues to run. 

It is also useful to refer to introducing changes while maintaining control as 'editing a 
running program' . That is how the process appears from the user's perspective, even though it 
25 actually consists of terminating one program and loading another. 

The terms 'incoming' and 'outj^ing* will be used in the pontext of program swapping 
in the sense, for example, that an incoming entity is one that replaces an outgoing entity of the 
same kind. Typical entities referred to may be programs, state data values, circuits configured in 
LPCs, etc. 
30 Speeding up program swaps 

A faster program swap can be provided using two LPCs, instead of one, arranged so that 
they may be selectively coupled to the input and output registers. The LPCs may be provided in 
two separate PLDs, or in two separately configurable sections of the same PLD as is most 
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convenient. 

Figure 8 shows such an arrangement- Input registers 39 deliver sampled and stored input 
signals 40 via switches 41 to LPC inputs 42 either to LPC1 43 or LPC2 44 depending on the 
position of the switches. UPC outputs 45 are similarly delivered to the output registers 48 via 
5 switches 46 and register inputs 47, 

With the switches 41 , 46, 51 etc in the positions shown LPC I is the operative logic 
processing circuit. LPC2 is available for configuration via the configuration bus 52, 54. The 
configuration bus 53 into LPC1 is disconnected. All of the switches shown in Figure 8 are 
coupled so that they are either all in the position shown, or all in the opposite position. In the 
10 opposite position, LPC2 is the operative logic processing circuit and LPC1 is available for 
configuration. 

It should be noted that the purpose of the switches 41 etc, on the LPC inputs is just to 
allow disconnection during LPC configuration. If the LPC implementation is such that the inputs 
may be left connected during configuration without malfunction, then switches 41 etc. may be 

1 5 eliminated, and permanent connections made in parallel to both LPCs. Further discussion will 
assume this latter arrangement. 

Figure 8 also shows means for transferring data 49 and 50, from LPC1 and LPC2 
respectively to the MC via the monitoring services and control unit 17 in Figure 5, as required 
to implement system monitoring functions. 

20 It will be readily apparent to those skilled in the art that the switches 41, 46, and 51 etc. 

may be of various types or semiconductor steering logic. 

The use of two LPCs allows the incoming LPC to be loaded with a bit pattern at leisure 
prior to completing the last logic processing cycle in the outgoing LPC, rather than between the 
last outgoing LPC logic processing cycle and first incoming LPC logic processing cycle. This 

25 reduces the program swap time. 

By using two LPCs, while the first LPC is operating, the user may edit the user control 
program logic diagram, generate a new bit pattern and load die new bit pattern into the second 
LPC. Once the new configuration is loaded, the second LPC may be coupled to the input and 
output registers, and at the same time, the previously operative LPC can be decoupled* 

30 In general, the program swap process can be completed in the minimum time by 

perfoiming all necessary processes such as bit pattern and relocation table compilation prior to 
the last logic processing cycle of the outgoing LPC. Improvements in swap times can also be 
obtained by using special purpose hardware assistance for such processes as reloading relocated 
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state data values as opposed to relying on the general purpose processing of the MC. 

The program swap process will now be discussed in more detail. This will be with 
reference to the double LPC method unless noted, but it will be easily seen that the same 
principles apply to the single LPC method. 
Managing state data 

Before a new user control program that has been configured in an LPC can operate 
correctly, the state data values must be initialised. This is normally done as part of the design of 
the program and function blocks, including the provision of initial values, and may be initiated 
by a power-on reset 

When an S C is reconfigured, the user who implements the circuit configuration must also 
initialise circuit state data in such a way as to ensure proper ongoing operation. When a running 
program is modified, the user must decide whether each function block continues to operate 
using any existing state data it may have, or whether changes to the state data are required for 
proper future operation. The same comments apply to other storage circuits. 

For example, in parts of the program that have not been altered by editing, it may well 
be logical to continue with the existing state data. If a new function block has been added to the 
program, there will be no previous state values existing, and any state data used by it must be 
initialised. If an existing function block, or the circuit around it, is altered then function block 
state data may need adjustment. 

The determining factor is the user's knowledge of how the circuit will function with 
different state data values. The user must consider both the requirements of the user control 
program circuit and the process under control 
Program swap sequence 

When the user program has b een modified, and the IPC bit pattern has been re-compiled, 
a single LPC program swap maybe sequenced as follows - 

1 > The last cycle of the outgoing LPC scan is terminated at the beginning of time period 37 
in the LPC scan. 

2. State data is read out of the outgoing LPC, 

3. The new configuration bit pattern is written into the LPC* 

4. Suitably relocated and modified state data is written into the LPC 

5. The first cycle of operation of the incoming LPC is started at the end of time period 37 
in the LPC scan. 

A program swap using two LPCs may be sequenced as follows - 
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1 . The new configuration bit pattern is written into the incoming LPC 

% The last cycle of the outgoing LPC scan is terminated at the beginning of time period 37 

in the LPC scan. 

3. State data is read out of the outgoing LPC 

4. Suitably relocated and modified state data is written into the incoming LPC. 

5. The outgoing LPC is decoupled from the output registers. 

6. The incoming LPC is coupled to the output registers. 

7. The first cycle of operation of the incoming LPC is started at the end of time period 37 
in the LPC scan* The details of the processes required and the meaning of "suitably 
relocated and modified state data" will be discussed next 

Reading and writing state date 

To facilitate managing state data values, a mechanism is provided allowing the reading 
and writing of state data values from outside the LPC. 

The mechanism may be provided as part of the SCs that use state data, or be a built-in 
part of the PLD within which the LPC is configured. 

Figure 6 shows a flip-flop 55 that can store one bit of state data* Access to the Q 38, 
Preset 57, and Clear 58 connections allows the flip-flop state to be read and set to true or false 
values by devices outside the LPC. Application of the method to a large number of state bits 
would require an unmanageable number of discrete connections to the LPC, and so an alternative 
method may be desirable. 
Configured means of access 

Figure 9 shows an example of asingle LPC 59 arranged to exchange data with an external 
circuit 62. It is arranged that all of the flip-flops as at 60, configured in the LPC user control 
program circuit, are interconnected as at 63 to form a shift register. The flip-flops, as at 60, 
within the LPC are numbered " 1 " to "8" to show their position in the shift register- The data in 
any flip-flop may be accessed by shifting it out of the LPC. The number of shift pulses required 
is calculated from the flip-flop number. The flip-flop number therefore functions as an address. 

The external circuit 62 also contains a shift register 64 of a convenient length, and the 
whole is connected into an endless loop shift register 6L The solid headed arrows in Figure 9 
indicate the direction of data shifting in the shift register loop shown. 

Shift register 64 is of the type that can be read and loaded via parallel connections 65, 
thereby exchanging data with the MC 7 memory devices or other circuits as required* 

A shift clock, not shown, is connected to all of the elements in the endless loop shift 
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register. If there are K stages in the endless loop shift register, then K cycles of the shift clock 
will shift the data completely round the loop and back into its original position. During this shift 
round the loop, the data may be read externally via the parallel connections 65, and if desired, 
itmay be modified via the parallel connections 65* Thus with K shift clock cycles all of the LPC 
state data may be read, modified and rewritten as desired. The K cycles are arranged to come in 
the time period 37 in Figure 7. 

We will refer to the K cycles of the shift clock as an 4 address rotation', meaning that one 
address rotation allows access to all the data in the shift register. The same terminology will be 
used later in association with random memory accesses also meaning that one address rotation 
allows access to all the data in the memory, 

It will be readily apparent that if K cycles represent an undesirably long time, that the 
system can be arranged to have multiple parallel shorter endless loop shift registers. It will also 
be readily apparent that each of the data bits may be arranged to be accessed using standard 
random access memory techniques, but such techniques may not always be efficient or 
convenient 

To allow the LPC flip-flops 60 to function both as user circuit devices and as part of the 
endless loop shift register 61, support circuits are provided* Figure 10 shows such a support 
circuit The support circuit for the flip-flop 66 works as follows. 

A select signal 67 is provided that when false will connect the shift data input 69 to the 
flip-flop data input 68, and also connect the data output 71 to shift data output 72. When true, 
signal 67 will connect the logic data input 7 0 to the data input 6 3 and also connect the data output 
7 1 to logic data output 73 . The select signal 67 maybe arranged to be switched false during time 
period 37 in Figure 7, allowing the shifting of data for reading and writing. The select signal 67 
may be arranged to be switched true during the remainder of the LPC scan 74 in Figure 7, 
allowing the flip-flop 66 to function as part of the LPC user control program circuit 

The application of the support circuit in Figure 10 around the flip-flop 66 imposes some 
restrictions on bow the flip-flop may be used in the user control program circuit, but the 
restrictions are of minor significance only. For example, one restriction is the need to steer shift 
and logic clock pulses to the clock input 75 at the appropriate times. For example also, a second 
restriction is the need to ensure that the user control program circuit can properly handle the 
transitions that will occur on the logic data output 73 when the select signal switches while the 
flip-flop output 71 is true. 
Built-in means of access 
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A PLD may be provided with built-in circuits to support access during operation to state 
data stored in die user accessible flip-flops it contains. 

Such access may either be provided via a shift register arrangement as discussed for use 
with SCs, or via a random access memory arrangement allowing the user to provide an address 
to select data and to read or write the data selected as one or more bits. 

This invention can use such an arrangement for reading and writing state data as an 
alternative to the means previously discussed if convenient. 
Display and modification of state data for system monitoring 

The MC can display state data with minimum interruption of the operation of the LPC 
by initiating the rapid copying of some or all of the state data into a memory external to the LPC 
during time period 37. The MC may then display the data in the memory at its leisure. 
Self-updating displays may be implemented with minimum interruption of the operation of the 
LPC by periodically initiating the copying of the LPC data into the memory. 

It is a function of the MC to understand the correspondence between the state data 
addresses and the function of the state data within the user control program circuit This 
correspondence data is generated as part of the design of the function blocks provided by the 
Programmable Controller supplier to the user, and may be provided in part as an address relative 
to the first state data address used by the function block concerned. As each function block is 
developed, the addresses of all the state data within the function blocks can be determined 
relative to the first bit of state data compiled The MC uses the correspondence data to facilitate 
the presentation of the state data in a user-friendly manner 

By way of example, the correspondence data may define that the count value held in a 
counter appears in state data bits 10 to 25 relative to the first state data bit in that type of function 
block. The first bit allocated by the circuit compiler to that function block may be bit 2S3. The 
count bits will then be bits 263 to 278. The control program development system may also 
provide information naming the function block as per the user control program circuit. The MC 
may then display on request die name of the function block and its associated count value in a 
way that is easily understood. Similarly, the MC may be enabled to display only the state data 
that is meaningful to the user and to ensure user modification of state data is well controlled and 
legitimate. Display of state data that is only relevant to the internal workings of a function block 
can be restricted and modification of such state data can be automatically managed to ensure 
proper operation. The determination of which state data requires reloading after reconfiguration 
can be handled in the same way. 
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It is envisaged that the control program development system and function block library 
may provide information associating the function block with software objects designed to provide 
the necessary software support* 

Modifying state data requires special care if it is only possible to transfer LPC state data 
5 in unstructured blocks such as occurs with a shift register arrangement; instead of transferring 
just the specific bits or bytes that are to be modified. The whole data block must be read after a 
logic processing cycle has completed, modified as required by the user, and the whole block 
written back into the LPC before the next logic processing cycle is started, That is, the operation 
must be completed within time period 37 in Figure 7. This method ensures that the only data that 
10 changes, as far as processing the user control program circuit is concerned, is the data that the 
:f user wishes to modify. The portions of the data that had to be read as part of the block, but were 

n not modified, are written back unchanged. The intermediate changes that occur during data 

^ shifting have no effect on the user control program circuit operation providing they all occur 

Ji during time period 37. 

zl 15 It should be noted that any data bit may require modification while the data bits on one 

$ or both sides of it do not Modification is a bit-by-bit process. 

f! Figure 1 1 shows a circuit arrangement in block diagram form suitable for use by an MC 

0 in the process of displaying and/or modifying state data. 

The arrangement has memories used to facUitate the hig^ speed copying, during which 

M 20 copying, the state data may be modified as required by the user. Hie data may be copied back to 
the same LPC it was read from, but for clarity two separate LPCs are shown. A single bit wide 
data path is shown for clarity, but wider data paths, for example 8 bits or 16 bits, may be used 
to advantage as long as arranged to modify the data bit-by-bit Hie functionality required to 
locate state data in the receiving LPC in a different position to that occupied in the source LPC 
25 is also shown, and is discussed later. 

The control unit 84 under command of the MC sequences and steers the data transfers in a 
conventional manner via data and control paths 98 and 99. The arrows 88, 92, 93, 96, 97 are 
paths along which data flows at times appropriate to specific transfers and should not be 
interpreted as permanent connections. 
30 The arrangement shows LPCs 76 and 77 with shift registers 78 and 79 connected in the 

manner of Figure 9. It will also be readily apparent to those skilled in the art how the state data 
bits may be accessed using standard random access memory techniques. It should be noted that 
address references to state data locations may be in terms of the position of the data in a shift 
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register, as shown in Figure 9, or in terms of a memory address if random access memory 
addressing techniques are used to access the data. 

The memories are arranged so that memory 8 1 holds new values to be optionally applied 
as modifications to the data during copying. Memory 82 holds data representing an array of flags 
5 indicating which state data bits require the optional modification and which do not. Memory 80 
stores data that has been read and has had the modifications optionally applied. 

Clock pulses applied to clock tine 85 shift data out of and into the LPCs, and also 
generate addresses on address bus 86 via the address counter 83. The whole is arranged so that 
the bit of state data shifted out of the first flip-flop in LPC 76 corresponds to the optionally 
10 modified data written into the first memory location in memory 80 and/or the first data bit written 
r . into shift register 79, The first data bit written into shift register 79 is ultimately shifted into the 

first flip-flop in LPC 77. Modifications are made in the same operation. The first bit of 
modification data stored in memory 81 is output onto line 89, and the first modification flag 
|j stored in memory 82 is output onto line 90* The polarity of the modification flag is such that, if 

15 a modification is required* the data bit on line 89 is multiplexed onto paths 92 and/or 96 by 
^ multiplexer 9 1 , otherwise the data on line 97 is multiplexed onto paths 92 and/or 96* 

3i 

U Each modification flag is reset when the associated modification has been applied to the 

!l state data. 

5 In this way, with suitable sequencing and steering logic, various data transfers may be 

H 20 made between LPC scans in period 37 as shown - 

L Data maybe placed inthemodificationmemorybytheMC viathecontrol 84, and copied 

to an LPC. An LPC may be totally re-written by this method. 

2. Data may be copied from one LPC to the same or another LPC and optionally modified 
during copying. 

25 3, Data may be copied from an LPC into the state data memory 80, The MC may access the 
data at leisure later via the control 84 and display it to the user. 

For example in the ease of copying and modifying data, the control unit 84 controls the 
number of shift clock pulses generated. Enough pulses are applied to shift the state data in LPC 
76 into the shift register 78 and bade into LPC 76 in its original position. The number amounts 

30 to one address rotation. The same clock pulses cause a complete rotation of the data in the 
endless shift loop of LPC 77 and shift register 79, during which the new values appearing via 
path 92 ate written in. The optionally modified first bit in the LPC 76 shift loop is written into 
the first position of the LPC 77 shift loop* the second bit into the second position, and so on until 
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all the required data is transferred* 

The memories and support circuits described may be provided internally within the same 
PLD used for the LPC, or as a separate device or devices within file programmable controller or 
as a function within the MC. The choice in any one case will depend on the trade-offs required 
S between Programmable Controller functionality, cost and speed of operation. 
Forcing state data 

Forcing state data is the process of holding some or all of the user control program state 
data at a defined fixed value in such a way that the user control program cannot alter it. Forcing 
may be used, for example, to hold a counter at some predetermined value, even though count 

10 pulses are present 

Forcing may be provided by running the data modification process each LPC scan the 
forcing is required. Doing so ensures that the state data concerned is in the same known state 
when the user control program is processed and allowed to settle. 

With normal modifications! the data modification flags are reset as part of applying the 

1 S modifications, and the user control program circuit is free to operate on the new values during 
the next UPC scan. That is, the modifications are applied only once, and the values may change 
from scan to scan. However, if the same modifications are applied each LPC scan, the state data 
values modified are effectively forced to remain at the modified values. 

To fecilitate forcing, the modification flagmemory 82 maybeprovided with two flag bits 

20 per bit of state data. One flag bit indicates whether a modification is to be made, and the other 
whether the state data bit is required to be forced. The value for modification or forcing is held 
in the modification data memory 81 * In addition, control unit 84 may have a flag to indicate 
whether any state data at all is forced, so that the data modification process maybe run to apply 
the forcing if required, but skipped if neither forcing nor normal modification is required. 

25 During normal modification of a state data bit, which is when the appropriate forcing flag 

in the modification flag memory 82 is false, once the new value is applied the appropriate 
modification flag is reset. During modification as pact of forcing, which is when the forcing flag 
is true, when the value is applied the modification flag is not reset. 

By these means, referring to the forcing flag in the control unit allows the control unit to 

30 start a modification process when required The forcing flags in the modification flag memory 
82 allow the appropriate state data bits to be forced. 
Forcing I/O data 

It is also anticipated that the control unit 84 will provide facilities to force I/O data, but 
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provision of such facilities is a straight forward matter. 

Copying, initialising and adjusting state data during a program swap 

During a program swap, state data values from the outgoing LPC are loaded into the 
incoming LPC modified in value as deemed appropriate by the user. Values for previously 
S non-existent SCs are initialised. 

When state data is copied from the outgoing LPC to the incoming LPC during a program 
swap, it is essential that data read from a specific outgoing user control program state data bit is 
written into the corresponding incoming user control program state data bit. 

During a program swap, the corresponding incoming user control program state data bit 
10 may well be at a different location and therefore have a different ad^ State 
pi data transfers during other operations do not usually have that problem* 

S Relocation of state data 

m Relocating state data requires the ability to copy the data bit by bit and place it at a 

IP defined destination location optionally different to the source location. No defined relationship 

m 15 can be assumed between the source and destination locations of any bit, or between the 
O destination location of one bit and the destination location of the next, other than as defined by 

u the MC controlling the operation. The locations result from incoming and outgoing user circuit 

interconnects and/or compilations. 
Jj It is a function of the MC to provide cross-reference information for each state data bit 

- ' 20 specifying the source and destination applicable. 

Figure 1 1 shows an arrangement for relocating state data during its transfer from one LPC 
to another. The arrangement is intended to provide high speed transfer and minimise the time 
required during the data transfer stage 37 of the LPC scan. Arrows 88, 92 s 93, 96, 97, represent 
data transfers performed at different times, rather than simple connections. 
25 The copy with relocation operation is performed as follows. Initially, the MC, via the 

control unit 84, loads relocation data into the relocation address memory 87. If, for example, 
source address 123 corresponds to destination address 654, then a value of 654 is loaded at 
address 123 in the relocation address memory 87. The process is repeated until all locations in 
the relocation table memory, corresponding to data to be copied from the LPC 76, have an 
30 appropriate stored destination address value. The relocation addresses are loaded at leisure by the 
MC via the control unit 84 outside of the data transfer stage 37 of the LPC scan. The 
modification data memory and the modification flag memory are loaded as required, also outside 
of the data transfer stage 37 of the LPC scan. The incoming LPC is reconfigured outside of the 
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data transfer stage 37 of the LPC scan as part of the program swap procedure. 

The actual state data transfer is performed during period 37 of the LPC scan. The process 
has two parts. 

Firstly, a first address rotation of the address counter is used and data is shifted out of 

5 LPC 76 via shift register 78 and stored in memory 95. The addresses for the destination data 
memory 95 are provided by therelocation address memory 87. Hence, using our example above, 
access to address 123 in LPC 76 will also access address 123 in the relocation address memory 
87* This will generate an output on bus 100 of a value 654, the value stored in the relocation 
address memory at address 123. This value is delivered to the destination data memory address 

1 0 bus 1 0 1 by multiplexer 94 under the control of the control unit The multiplexer 94 selects bus 
100 as the source for bus 101 during the first address rotation. The result is that the state data bit 
originating at the location 123 in LPC 76 is stored at location 654 in destination data memory 95, 
and is relocated as required for the program swap. Each state data bit in LPC 76 is similarly 
transferred and relocated into destination data memory 95. 

1 5 Secondly, a second address rotation of the address counter is used and the relocated state 

data is transferred from the destination data memory to LPC 77* The state data is modified as 
required using the techniques previously discussed based on the contents of the modification data 
memory and the modification flag memory. Multiplexer 94 selects address bus 86 as the source 
for bus 1 0 1 during the second address rotation, 

20 In Ihe way described state data ftom LPC 76 is copied into LPC 77, During the copying, 

the data is relocated and modified as determined by the contents of the modification data memory 
81, the modification flag memory 82, and the relocation table memory 87 provided by the MC 
via the control unit 84. It is a function of the MC via the control unit 84 to arrange the loading 
of suitable values. It is also a function of the MC via the control unit 84 to arrange the number 

25 of counts making up each rotation of the address counter and controlling the data shifting 
process. This information is generated on the MC during the program preparation process* 

It should be noted that in general the size of the incoming and outgoing user control 
program circuits will be different due to program modifications made. Data from LPC 76 may 
be relocated outside the address range applicable to the program in LPC 76 if the incoming 

30 program is larger. Data in the modification memory will augment the state data in the destination 
data memory if the incoming program is larger. Some outgoing state data may be irrelevant and 
may be discarded by, for example, being written to an address outside the range of the incoming 
program. Due to the difference in sizes, the first and second address rotations will consist of 
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different numbers of pulses. It is anticipated that all control data for the first and second rotations 
will be loaded into the control unit as required prior to the initiation of the program swap, and 
that the program swap will complete, once initiated, without further involvement of the MC 

Figure 1 1 illustrates an arrangement with singlebit wide datapaths. It will be easily seen 
5 that data may be handled in a byte-wide or 16 bit wide manner by the use of multiple relocation 
table memories 87 and multiple bit-wide destination data memories 95* 
Resumption after a power outage 

The system may be arranged to retain state data across power outages when power is lost 
totheLPC. 

1 0 The critical requirements being - 

1 . Firstly, as power is lost, a properly managed shutdown performed by control unit 84 must 
ensure that all SC state data is properly stored in a battery backed-up memory or similar secure 
store. 

2. Secondly, on re-powering after a power outage, the program bit pattern (if lost due to the 
15 power outage) and the state data must be reloaded. 

These two steps together with a properly managed cessation and initiation of normal logic 
processing cycles will enable the user control program to continue from the point where power 
was lost. 

It must be noted that it is the user's responsibility to ensure, that the complete combined 
20 state of the controller and the process under control, enable such a continuance to be safely 
carried out. 

Examination of Figure 1 1 will show several memories that may be used for backup by 
the control unit 84, and it is a simple matter to make such arrangements. 
Failure detection and correction 
25 It is desirable to detect and correct control system failures in systems controlling process 

plant and machinery. 

In the current art this is done by means ranging from watchdog timers that monitor correct 
processor operation to systems with redundant processors and voting comparators that detect 
when, for example, one out of three systems deviates from the other two. 
30 The present invention can be arranged with two LPCs. Both LPCs can be arranged to 

have identical user control program circuits, and input data and be clocked identically. Any 
difference in the output data of one LPC compared to the other once stable after clocking, 
indicates that one or the other has malfunctioned. 
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The process is essentially the same as that used to test digital circuits during manufacture, 
in which process device outputs ate compared clock by clock with test vectors produced by a 
known good device or simulation. 

Figure 12 shows conceptually how this may be done* LPC 102 and LPC 103 are fed in 
5 parallel, which is to say that all input signals are applied to them identically. The assumption is 
made that the two devices will not fail identically on the same clock cycle, and that any 
difference in outputs between the two devices is indicative of a failure in at least one of them. 
It is also assumed at this stage of the discussion that the error detecting circuits operate correctly. 
The LPCs produce output signals numbered I through M. Output 106 from LPC 102 is compared 
10 with output 106a from LPC 103 using two input XOR gate 104, which will produce an output 
if the two input signals 106 and 106a differ. All M output signals are compared in a similar 
manner, through to signal 107 compared to signal 107a in gate 105. If any of the signal pairs 
display a difference* then the M input OR gate 108 will produce an output indicative of a Mure, 
Clock signal 1 10, timed to sample the output of the OR gate after it has stabilised, will place a 
IS stored true level on the Q output of flip-flop 109 indicative of a failure if such occurs. 

Note that only four inputs are shown on the M input OR gate, only two of which are 
shown connected. The dashed vertical lines imply a series of circuits of the kind shown at the 
ends of the lines in the space occupied by the lines. 

It can be seen that additional LPCs can be added, together with voting circuits to detect 
20 the LPC that has failed, and differences in operation can be detected. Once a Med device is 
detected it can be disabled from driving the control outputs and operation maintained by 
remaining good devices by enabling those devices to drive the control outputs* Operation can 
therefore continue without propagation of errors to the outputs. 

It should be noted that in systems using multiple LPCs operating in parallel, all LPCs 
25 must be fed with inputs from the same sources. In particular, the input register used to 
synchronise asynchronous input signals must be common to all LPCs. If it is not, clock skew and 
the setup and hold time violations implicit in synchronising the asynchronous input signals, will 
at times cause malfunction due to the differing output values register to register, 

Figure 1 3 shows a circuit that can detect Mures and determine which out of three devices 
30 has failed* It is then a simple matter to continue operation with the two devices that are properly 
operational until the Mure can be corrected* 

fo Figure 13, LPCs 1 1 1, 1 12, 1 1 3 are partially shown. The M two-input XOR gates in 
column 1 1 4 and the M input OR gate in column 1 1 5 compare the two sets of outputs from LPCs 



Ill and 1 12, in the manner of the circuit in Figure 12. The result is stored on flip-flop 116. 
Similarly, the devices in columns 1 17 and 1 18 compare LPCs 1 12 and 1 13 and store the result 
on flip-flop 1 19. The devices in columns 120 and 121 compare LPCs 113 and 111 and store the 
result on flip-flop 122. In this way, a failure of any one LPC will set two flip-flops. The flip-flop 
that is not set is the one that stores the comparison for the two devices that are operating without 
failure, and is therefore indicative of the devices that should be allowed to continue operation. 
It is a simple and routine matter to arrange suitable logic and sequencing circuits to lock out the 
bad device, indicate the need for attention, and continue uninterrupted operation* 

It is possible that to reduce the overhead associated with this error checking mechanism 
one or more outputs of the LPCs could be excluded from the set of outputs subject to the 
comparison process. The omitted outputs may represent functionality that is non-critical to 
operation* In this case the omitted outputs may be assumed good if coming from a device which 
is otherwise functioning correctly (so for as its set of compared outputs is concerned) and used 
accordingly. 

It will be apparent that state data modifications made by the user with the system 
monitoring facilities are part of the general input data for the LPC system. Thus, if two or more 
LPCs are being operated in parallel for the purpose of failure detection as discussed, then each 
must receive identical modifications, clock cycle by clock cycle, and the same principle applies 
to every input signal to the devices* 
Improved protection 

An additional level of protection can be provided as follows, the improvement being one 
of protecting against failures in the Mure detection circuitry itself 

In a system with two or three LPCs, it can be arranged that each LPC contains within it 
a failure detection and/or correction circuit of the type shown in Figures 12 or 13. A necessary 
requirement for this is that all of the M output signals from each of the other LPCs must be 
supplied as inputs for the failure detection and/or correction circuits. When so arranged, each 
LPC is enabled to monitor its own operation and shut down as appropriate. Each LPC is also 
enabled to monitor the operation of the other LPC(s) and effect a shut-down or disablement of 
an LPC as appropriate to the circuits provided and the situation detected. Each LPC may also 
generate status outputs for the system that indicate the identity of an LPC detected as failing. 
Duplication of the monitoring circuits provides improved protection. 

The duplicated failure detection and/or correction circuits may also be provided external 
to the LPCs if desired. Theusermay also be provided with the flexibility to choose the desired 
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level of protection by the provision of suitable feilure detection and/or correction circuits as 
function blocks for inclusion within the user control program. 
Monitoring external circuits 

Failures may occur in the wiring of a Programmable Controller system external to the 

5 programmable controller itself, or in the sensors and actuators used on the process plant or 
machinery under control. 

This invention provides for the monitoring of actuator operation with sensors, and for the 
monitoring of sensor operation by the u$e of duplicate sensors. A functionblock maybe provided 
within the user control program circuit that accepts two or more sensor inputs. 

1 0 The function block monitors the validity of the sensor inputs. With Boolean signals, the 

signals would be considered valid if they do not differ in value from each other for longer than 
some user specified interval dependent on the process plant or machinery under control. With 
digitally encoded continuous value signals, the signals would be considered valid if they do not 
differ in value from each other by greater than a user specified amount for longer than some user 

15 specified interval. Boththeuserspedfiedamountandintervalwou^^ 
plant or machinery under control. 

Where failure detection only is provided, the function block provides continuous 
monitoring of the appropriate duplicate input signals, and passes on a single copy of the signal 
if judged good; otherwise an error output from the function block is activated. 

20 Where three or more duplicate input signals are available, the function block may also 

compare each against the others. By determining which are the same within the set criteria, and 
which are not, the function block may determine which are in error and which are good using 
techniques equivalent to those for LPC outputs described with Figure 13. 

Where Boolean signals are compared, XOR gates, as per Figures 12 or 13 as appropriate; 

25 are used to generate difference signals. The difference signals trigger a digital edge-triggered 
re-triggerable one-shot. An error is deemed to exist if the difference signal is still true when the 
one-shot times out 

When digitally encoded continuous value signals are compared, the principles are the 
same, but the comparison means is dependent on the type of encoding used. The encoding may 
30 be via, for example, parallel Boolean signals, pulse width modulation, frequency modulation or 
any of many other standard wooding methods. 
Speed of response 

The first characteristic of the invention that will be apparent to a person skilled in the art 
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of programmable controllers will be the increase in speed ofresponse provided by a PLD based 
Programmable Controller over that provided by a processor based unit 

It will be apparent that the instruction processing inherent with processor based 
programmable controllers slows the response. The processing involves - 
5 1 * Reading in all external input values, 

2, Processing all relevant parts of the user control program taking input values and internal 
data values into account. 

3. Writing out all required output values. 

Stages 1 and 3 above are often referred to in combination as the I/O scan, and stage 2is 
10 similarly referred to as the Program scan. 

The three steps are similar to the LPC processing stages, except that they require the 
services of a processor fetching and executing instructions, and typically take many clock cycles 
to complete. 

The three steps repeat continuously like a recording on an endless loop of tape. Typical 
15 scan times around the loop may be 1 to 20ms and are dependent on program size. If a new input 
value arrives just too late to be read in stage 1 , then it must wait a complete scan before being 
read and most of another full scan before any new resulting output value is written to the process 
under control. 

Real world processes may require many successive scans to perform arequired action and 
20 the sum of the scan times can be a limiting factor in terms of process control performance. 

A PLD based Programmable Controller processes its logic at hardware speeds. Although 
it is envisaged that asynchronous inputs will be sampled at defined clock edges, the time taken 
for a new input value to generate a new output value can be expected to be measured in 
microseconds* Although the interface circuits required to provide noise immunity and the data 
25 transfers required by monitoring services will slow the response, a PLD based Programmable 
Controller can still be expected to be many times faster than a processor based Programmable 
Controller* 

The increase in speed of response is very significant to the control of fast machinery and 
systems* 
30 flexibility 

With the new architecture, different sizes of Programmable Controller can be provided 
by changing the size of the PLD used. The PLD based Programmable Controller requires no 
built-in software system. The development system software is the same independent of 
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Programmable Controller size ether than requiring different PLD fitter modules for different 
PLDs. 

Additional hardware functionality, including specialist fast hardware functionality, can 
be provided via the user control program with function blocks taken from a library provided by 
5 the Programmable Controller supplier or built from the basic logic elements supported by the 
programming system. 

At this time, functions as complex as complete microprocessors are available for purchase 
or licensing and use within Programmable Logic Devices. That is not to say that microprocessors 
would represent a reasonable choice for an industrial controls designer, but the possibility is 
10 mentioned to show that the functions incorporated could be of considerable complexity. 

This emphasises that the invention represents a platform and means of assembly on which 
many varied systems from the simplest to the most complex can be built. 

It should also be noted that a Programmable Controller supplier would undoubtedly want 
to provide a full set of function blocks carefully designed to be easy and fool-proof to use. The 
1 5 optimal form of the function blocks for Programmable Controller use may be very different to 
those for electronic circuit design use, and will in any case need to be compatible with the 
required data transfers. 

Having made the above points, it should be said that the use of a good Hardware 
Description Language based development system allows for the provision of library functions 
20 that- 

• Incorporate considerable complexity and functionality, 

• May operate by means of an embedded microprocessor or other complex logic invisible 
to the user, and 

• Have a very simple user interface 

25 Hardware Description Language development methods allow for a library function to be 

fully tested by its supplier, to be incorporated with ease by the user, and to be configured, 
inclusive of any embedded microprocessor, within the PLD by the download of a bitmap. 

The result of being able to download hardware functionality is both an ability to upgrade 
systems easily in the field, and a reduction in the requirement for product model variations where 

30 each model offers a variation on the functionality of the others. 
Reliability 

The invention is suited to implementation with a minimum of components and can easily 
incorporate failure detection and correction. As such, it can offer a very high level of reliability, 

-29- 



compensating even for Mures in associated wiring, sensors and actuators. 

When implemented without failure detection and correction, failures in individual circuits 
within the LPC will generally be limited in effect to the functionality provided by those circuits 
because of the one to one correspondences between the user control program and the circuits in 
5 the LPC. That is not the case with failures in a processor where a failure in any critical item can 
cause a processor crash and bring the whole system to a halt. 
Embedded microprocessors - essential elements 

The essential elements of a function block operating by way of an embedded 
microprocessor are - 

10 • The embedded microprocessor only exists as such after the PLD is configured with a 
bitmap containing the necessary configuration patterns. Prior to configuration the PLD 
is just a PLD with no inherent ability to fetch and execute instructions, and no 
instructions to process, 

• The microprocessor forms part of a subsidiary function within the overall user control 
1 5 program. There is no instruction processing controlling arepeating I/O and Program scan 

such as is characteristic of a Programmable Controller based on one or more processors. 

• Hie principal control logic for the end-user control program is still implemented as a 
physical circuit configured with a bitmap loaded into the PLD. 

External processors 

20 Nothing discussed here precludes the use of external processors. 

A configured PLD used as a Programmable Controller may well exchange information 
via its I/O with some other processor-based system. It is likely to do so with an MC for program 
development purposes and with other computers for system supervisory purposes. 

It is also envisaged that users may wish to use I/O resources to communicate with external 

25 intelligent systems of many kinds and that the necessary interfaces may be implemented partially 
within the PLD as configured logic and partially in external devices. Such division of 
responsibilities is normal system design practice and does not detract from the present invention. 
The PLD based Programmable Controller still remains in control of those functions designated 
for it by the user, 

30 Soft instruments 

It will be noted that the facility to handle function blocks within the user control program, 
and also to edit and modify the program while it is running, allows the user to add special 
function blocks for diagnostic purposes, and to modify or remove the function block connections 
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at will. Hie user can effectively add soft instrumentation to the user circuit, and re-connect it as 
convenient, all without stopping the user control program, just as would be done with a discrete 
circuit consisting of separate physical components instead of function blocks. 

The ability to easily add and remove diagnostic function blocks (DFBs) is of considerable 
value. Complex DFBs can use much PLD capacity. Much of the time only small sections of the 
user circuit wilt require the use of DFBs. The kind of DFB required, and which section requires 
it will vary from time to time. The ability to modify an operative program while still maintaining 
proper control allows the user to make best use of the PLD capacity, and to minimise the time 
spent in resetting machinery. 
Advantages 

Means of controlling the program, displaying, modifying and forcing data, modifying the 
program while it is operating, and detecting and correcting operational failures are provided. The 
Programmable Controller is highly flexible as to the functions performed and fast in response to 
input signals. The hardware circuits required to implement the controller are simple and require 
only a few components. 

All types of control functionality can be implemented on the new architecture because 
ladder diagrams, logic diagrams, sequence controls and function blocks can all be expressed in 
logic circuit form. 
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